SOC-HUB // OPERATIONAL Tue 22 Sep 2026 · UTC
⚠ Live Threats
CISA · CISA Adds One Known Exploited Vulnerability to CatalogCISA · CISA Adds One Known Exploited Vulnerability to CatalogCISA · CISA Adds Two Known Exploited Vulnerabilities to CatalogZDI: Published · ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution VulnerabilityZDI: Published · ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution VulnerabilityZDI: Published · ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution VulnerabilityZDI: Published · ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure VulnerabilityICS Advisories · Bransys ELD
OPERATIONAL // BLUE TEAM

The one stop shop for SOC analysts.

Knowledge base, playbooks, live threat intel, tools and jobs. Everything a defender needs to triage faster and grow from L1 to L3, in one place.

Explore Knowledge Base → Live Threat Intel
1
KB Articles
0
IR Playbooks
0
Tools
0
Open Roles
// Knowledge Base

Ten domains, one curriculum

View all
📊 SIEM 0 articles 🔎 DFIR 0 articles 🎯 Threat Hunting 0 articles ☁ Cloud Security 0 articles 🌐 Network 0 articles 🦠 Malware Analysis 0 articles 📧 Phishing 0 articles 🔐 Identity / IAM 0 articles 🚨 Incident Response 0 articles 🕵 OSINT 0 articles
// From Team SOC Analysts

Latest analysis

All articles
// Uncategorized
Uncategorized

Hello world!

Welcome to WordPress. This is your first post. Edit or delete it, then start writing!

By Team SOC Analysts · 1 min read
// Aggregated

Cyber News

More
// Feed temporarily unavailable. Verify feed URLs under Customize › SOC-Hub Feeds.
// Advisories

Vulnerabilities & Threats

More
CISA21 Sep 12:00
CISA Adds One Known Exploited Vulnerability to Catalog
CISA18 Sep 12:00
CISA Adds One Known Exploited Vulnerability to Catalog
CISA18 Sep 12:00
CISA Adds Two Known Exploited Vulnerabilities to Catalog
ZDI: Published18 Sep 05:00
ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability
ZDI: Published18 Sep 05:00
ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability
ZDI: Published18 Sep 05:00
ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability
// JOIN THE SHIFT

Bookmark SOC-Hub. Start your next shift here.

News, CVEs, playbooks and tradecraft, refreshed continuously and curated for working analysts.

Start reading →